Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/fEzLocBe-GYMTYmHl0qtA4vCtDA.mft
File: fEzLocBe-GYMTYmHl0qtA4vCtDA.mft (raw, json)
Hash identifier: ANRiH4QXOwiTSqbiK2APuHyuPGI49WSKmxA4r5Sq4+4=
Subject key identifier: 71:3B:91:93:C3:DE:3D:59:61:94:7B:63:3B:71:3A:EA:22:1C:FA:13
Authority key identifier: 7C:4C:CB:A1:C0:5E:F8:66:0C:4D:89:87:97:4A:AD:03:8B:C2:B4:30
Certificate issuer: /CN=7c4ccba1c05ef8660c4d8987974aad038bc2b430
Certificate serial: 019FAA886FE7A26A44265ADF9F8CF6252192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEzLocBe-GYMTYmHl0qtA4vCtDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/fEzLocBe-GYMTYmHl0qtA4vCtDA.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:35 +0000
Manifest this update: Tue 28 Jul 2026 21:01:35 +0000
Manifest next update: Wed 29 Jul 2026 21:01:35 +0000
Files and hashes: 1: fEzLocBe-GYMTYmHl0qtA4vCtDA.crl (hash: LwDTY0CE7tl/JCEBnQBN1gyb9S811qO7VtYwjy7u3V4=)
2: sXywAJPQehkX1g8ECCZJdITzLYQ.roa (hash: hR+8uJ6ekanBnzUMm4s8hR/ynV+UmDevvGRnAGbC8cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/fEzLocBe-GYMTYmHl0qtA4vCtDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/fEzLocBe-GYMTYmHl0qtA4vCtDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fEzLocBe-GYMTYmHl0qtA4vCtDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:6f:e7:a2:6a:44:26:5a:df:9f:8c:f6:25:21:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4ccba1c05ef8660c4d8987974aad038bc2b430
Validity
Not Before: Jul 28 21:01:35 2026 GMT
Not After : Jul 29 21:01:35 2026 GMT
Subject: CN=713b9193c3de3d5961947b633b713aea221cfa13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7f:d8:a5:12:df:4e:7f:be:1e:aa:7b:99:56:
84:80:70:93:cd:82:5c:1d:cb:75:5c:7e:e4:48:a8:
a0:c5:ad:30:4b:27:ef:10:6e:9e:2b:78:9b:2e:bb:
21:8d:68:bd:5d:e3:b1:46:68:87:3f:e9:03:74:0f:
de:41:9f:2b:ce:e5:bd:9b:16:12:66:77:55:52:c4:
26:ff:52:4a:d7:f7:5e:27:43:17:9d:d6:4a:f5:ae:
53:e1:98:fb:56:c6:1b:ee:a7:85:06:59:06:20:ac:
f0:4c:ba:94:5a:f2:3e:a8:db:55:fd:21:a3:f6:64:
26:09:45:33:67:2d:4d:0d:50:9e:c9:67:43:8e:3c:
40:f1:0f:4a:80:03:bf:00:78:55:d7:0e:f0:bf:9e:
2d:5d:39:0a:0f:08:59:5a:b0:9b:de:e8:4a:ba:65:
b2:c2:1d:ca:ef:b4:10:73:59:5d:95:84:35:1a:82:
c1:c1:d9:a2:27:4b:e1:e5:d9:32:08:ff:7f:39:c6:
ae:e5:30:7b:17:64:6e:2c:19:9c:42:30:ff:93:3c:
81:b3:e3:96:b2:77:98:c6:8e:1b:cd:ce:ea:ff:50:
d2:5c:bf:77:99:64:74:e7:55:e0:29:f1:8f:56:89:
2a:47:f0:13:e1:e0:66:a2:e7:74:80:72:ae:b8:b7:
f0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3B:91:93:C3:DE:3D:59:61:94:7B:63:3B:71:3A:EA:22:1C:FA:13
X509v3 Authority Key Identifier:
keyid:7C:4C:CB:A1:C0:5E:F8:66:0C:4D:89:87:97:4A:AD:03:8B:C2:B4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEzLocBe-GYMTYmHl0qtA4vCtDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/fEzLocBe-GYMTYmHl0qtA4vCtDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/fEzLocBe-GYMTYmHl0qtA4vCtDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:1c:3f:61:c5:16:f1:0e:56:16:65:16:8c:35:37:03:be:b3:
f4:df:8b:95:fe:4b:ff:a4:80:d0:02:eb:14:e4:43:13:bc:07:
d0:a2:a1:db:b9:60:fd:af:40:c6:31:61:ed:01:80:32:ad:b7:
b5:d7:29:03:b4:04:5a:0e:e4:cb:1e:41:49:aa:9b:79:5d:7b:
cc:2c:35:b4:9b:97:6e:87:ee:bc:87:cd:7a:70:ef:18:88:50:
49:b4:d7:15:6e:d0:28:66:77:0d:03:0e:5c:f2:59:a7:2d:4e:
69:eb:66:e0:ef:74:75:65:33:22:85:22:a1:5c:5f:6c:b5:b0:
f5:52:20:1a:ed:23:a0:b9:92:ef:b2:d1:a3:06:37:d1:1c:b2:
7e:04:e0:22:22:13:7c:c0:26:79:d0:1b:d7:0f:a2:0b:4b:0c:
0f:c0:c4:5c:27:15:ae:f3:02:83:79:e6:a7:a1:1e:e9:95:f6:
d8:b8:66:00:22:45:d9:f3:bc:b0:c1:58:37:a6:36:d7:29:c1:
64:57:f1:8d:7f:ee:85:cd:39:32:7d:4a:77:ae:4f:9e:e1:6a:
cf:f8:fd:cf:26:e9:7f:08:8b:d5:58:56:e9:24:0b:c2:69:94:
b8:91:4c:53:47:9b:63:2a:89:0e:c4:c0:79:5f:8a:eb:fc:a6:
73:44:0a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:23:30 2026 by rpki-client